Debian Bug report logs - #543177
/usr/bin/php5: random segfault running moodle cron job

version graph

Package: php5-cli; Maintainer for php5-cli is (unknown);

Reported by: Paul Wise <pabs@debian.org>

Date: Sun, 23 Aug 2009 03:45:01 UTC

Severity: normal

Found in version php5/5.2.10.dfsg.1-2

Fixed in version 5.3.3-7

Done: Ondřej Surý <ondrej@sury.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#543177; Package php5-cli. (Sun, 23 Aug 2009 03:45:04 GMT) (full text, mbox, link).


Acknowledgement sent to Paul Wise <pabs@debian.org>:
New Bug report received and forwarded. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Sun, 23 Aug 2009 03:45:04 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Paul Wise <pabs@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: /usr/bin/php5: random segfault running moodle cron job
Date: Sun, 23 Aug 2009 11:35:27 +0800
[Message part 1 (text/plain, inline)]
Package: php5-cli
Version: 5.2.10.dfsg.1-2
Severity: normal
File: /usr/bin/php5

I noticed a php core file in my corefiles directory. It appears it was
running the moodle cron job at the time:

  Core was generated by `/usr/bin/php -f /usr/share/moodle/admin/cron.php'.

It is not reproducible, the cron job runs every five minutes and this is
the only segfault that occurred. If the below backtrace is not useful,
please just close this bug.

root@chianamo:~# gdb --core /var/cache/corefiles/core-1814-33-33-11-1250948701-chianamo-php /usr/bin/php
GNU gdb 6.8-debian
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu"...

warning: Can't read pathname for load map: Input/output error.

warning: .dynamic section for "/usr/lib/libxml2.so.2" is not at the expected address (wrong library or version mismatch?)
Reading symbols from /lib/libcrypt.so.1...Reading symbols from /usr/lib/debug/lib/libcrypt-2.9.so...done.
done.
Loaded symbols for /lib/libcrypt.so.1
Reading symbols from /usr/lib/libz.so.1...Reading symbols from /usr/lib/debug/usr/lib/libz.so.1.2.3.3...done.
done.
Loaded symbols for /usr/lib/libz.so.1
Reading symbols from /usr/lib/libpanel.so.5...done.
Loaded symbols for /usr/lib/libpanel.so.5
Reading symbols from /lib/libncurses.so.5...done.
Loaded symbols for /lib/libncurses.so.5
Reading symbols from /usr/lib/libssl.so.0.9.8...done.
Loaded symbols for /usr/lib/libssl.so.0.9.8
Reading symbols from /usr/lib/libdb-4.7.so...done.
Loaded symbols for /usr/lib/libdb-4.7.so
Reading symbols from /lib/libbz2.so.1.0...done.
Loaded symbols for /lib/libbz2.so.1.0
Reading symbols from /usr/lib/libpcre.so.3...done.
Loaded symbols for /usr/lib/libpcre.so.3
Reading symbols from /lib/libresolv.so.2...Reading symbols from /usr/lib/debug/lib/libresolv-2.9.so...done.
done.
Loaded symbols for /lib/libresolv.so.2
Reading symbols from /lib/libm.so.6...Reading symbols from /usr/lib/debug/lib/libm-2.9.so...done.
done.
Loaded symbols for /lib/libm.so.6
Reading symbols from /lib/libdl.so.2...Reading symbols from /usr/lib/debug/lib/libdl-2.9.so...done.
done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /lib/libnsl.so.1...Reading symbols from /usr/lib/debug/lib/libnsl-2.9.so...done.
done.
Loaded symbols for /lib/libnsl.so.1
Reading symbols from /usr/lib/libgssapi_krb5.so.2...done.
Loaded symbols for /usr/lib/libgssapi_krb5.so.2
Reading symbols from /usr/lib/libkrb5.so.3...done.
Loaded symbols for /usr/lib/libkrb5.so.3
Reading symbols from /usr/lib/libk5crypto.so.3...done.
Loaded symbols for /usr/lib/libk5crypto.so.3
Reading symbols from /lib/libcom_err.so.2...done.
Loaded symbols for /lib/libcom_err.so.2
Reading symbols from /usr/lib/libxml2.so.2...Reading symbols from /usr/lib/debug/usr/lib/libxml2.so.2.7.3...done.
done.
Loaded symbols for /usr/lib/libxml2.so.2
Reading symbols from /lib/libc.so.6...Reading symbols from /usr/lib/debug/lib/libc-2.9.so...done.
done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /usr/lib/libcrypto.so.0.9.8...done.
Loaded symbols for /usr/lib/libcrypto.so.0.9.8
Reading symbols from /lib/libpthread.so.0...Reading symbols from /usr/lib/debug/lib/libpthread-2.9.so...done.
done.
Loaded symbols for /lib/libpthread.so.0
Reading symbols from /lib/ld-linux-x86-64.so.2...Reading symbols from /usr/lib/debug/lib/ld-2.9.so...done.
done.
Loaded symbols for /lib64/ld-linux-x86-64.so.2
Reading symbols from /usr/lib/libkrb5support.so.0...done.
Loaded symbols for /usr/lib/libkrb5support.so.0
Reading symbols from /lib/libkeyutils.so.1...done.
Loaded symbols for /lib/libkeyutils.so.1
Reading symbols from /usr/lib/php5/20060613/curl.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613/curl.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613/curl.so
Reading symbols from /usr/lib/libcurl.so.4...done.
Loaded symbols for /usr/lib/libcurl.so.4
Reading symbols from /usr/lib/libidn.so.11...done.
Loaded symbols for /usr/lib/libidn.so.11
Reading symbols from /usr/lib/libssh2.so.1...done.
Loaded symbols for /usr/lib/libssh2.so.1
Reading symbols from /usr/lib/liblber-2.4.so.2...done.
Loaded symbols for /usr/lib/liblber-2.4.so.2
Reading symbols from /usr/lib/libldap_r-2.4.so.2...done.
Loaded symbols for /usr/lib/libldap_r-2.4.so.2
Reading symbols from /lib/librt.so.1...Reading symbols from /usr/lib/debug/lib/librt-2.9.so...done.
done.
Loaded symbols for /lib/librt.so.1
Reading symbols from /usr/lib/libgcrypt.so.11...done.
Loaded symbols for /usr/lib/libgcrypt.so.11
Reading symbols from /usr/lib/libsasl2.so.2...done.
Loaded symbols for /usr/lib/libsasl2.so.2
Reading symbols from /usr/lib/libgnutls.so.26...done.
Loaded symbols for /usr/lib/libgnutls.so.26
Reading symbols from /usr/lib/libgpg-error.so.0...done.
Loaded symbols for /usr/lib/libgpg-error.so.0
Reading symbols from /usr/lib/libtasn1.so.3...done.
Loaded symbols for /usr/lib/libtasn1.so.3
Reading symbols from /usr/lib/php5/20060613/gd.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613/gd.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613/gd.so
Reading symbols from /usr/lib/libgd.so.2...done.
Loaded symbols for /usr/lib/libgd.so.2
Reading symbols from /usr/lib/libt1.so.5...done.
Loaded symbols for /usr/lib/libt1.so.5
Reading symbols from /usr/lib/libfreetype.so.6...done.
Loaded symbols for /usr/lib/libfreetype.so.6
Reading symbols from /usr/lib/libX11.so.6...done.
Loaded symbols for /usr/lib/libX11.so.6
Reading symbols from /usr/lib/libXpm.so.4...done.
Loaded symbols for /usr/lib/libXpm.so.4
Reading symbols from /usr/lib/libpng12.so.0...done.
Loaded symbols for /usr/lib/libpng12.so.0
Reading symbols from /usr/lib/libjpeg.so.62...done.
Loaded symbols for /usr/lib/libjpeg.so.62
Reading symbols from /usr/lib/libfontconfig.so.1...Reading symbols from /usr/lib/debug/usr/lib/libfontconfig.so.1.3.0...done.
done.
Loaded symbols for /usr/lib/libfontconfig.so.1
Reading symbols from /usr/lib/libxcb.so.1...done.
Loaded symbols for /usr/lib/libxcb.so.1
Reading symbols from /usr/lib/libexpat.so.1...done.
Loaded symbols for /usr/lib/libexpat.so.1
Reading symbols from /usr/lib/libXau.so.6...done.
Loaded symbols for /usr/lib/libXau.so.6
Reading symbols from /usr/lib/libXdmcp.so.6...done.
Loaded symbols for /usr/lib/libXdmcp.so.6
Reading symbols from /usr/lib/php5/20060613/mysql.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613/mysql.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613/mysql.so
Reading symbols from /usr/lib/libmysqlclient_r.so.15...done.
Loaded symbols for /usr/lib/libmysqlclient_r.so.15
Reading symbols from /usr/lib/php5/20060613/mysqli.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613/mysqli.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613/mysqli.so
Reading symbols from /usr/lib/php5/20060613/pdo.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613/pdo.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613/pdo.so
Reading symbols from /usr/lib/php5/20060613/pdo_mysql.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613/pdo_mysql.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613/pdo_mysql.so
Reading symbols from /usr/lib/php5/20060613/pdo_pgsql.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613/pdo_pgsql.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613/pdo_pgsql.so
Reading symbols from /usr/lib/libpq.so.5...done.
Loaded symbols for /usr/lib/libpq.so.5
Reading symbols from /usr/lib/php5/20060613/pgsql.so...Reading symbols from /usr/lib/debug/usr/lib/php5/20060613/pgsql.so...done.
done.
Loaded symbols for /usr/lib/php5/20060613/pgsql.so
Reading symbols from /lib/libnss_files.so.2...Reading symbols from /usr/lib/debug/lib/libnss_files-2.9.so...done.
done.
Loaded symbols for /lib/libnss_files.so.2
Reading symbols from /lib/libgcc_s.so.1...done.
Loaded symbols for /lib/libgcc_s.so.1
Core was generated by `/usr/bin/php -f /usr/share/moodle/admin/cron.php'.
Program terminated with signal 11, Segmentation fault.
[New process 1814]
#0  php_realpath (path=0x2a1aa00 "/usr/share/moodle/lib/adodb/adodb-time.inc.php", resolved=Cannot access memory at address 0x7fff9c472828
) at /build/buildd/php5-5.2.10.dfsg.1/TSRM/tsrm_virtual_cwd.c:278
278	/build/buildd/php5-5.2.10.dfsg.1/TSRM/tsrm_virtual_cwd.c: No such file or directory.
	in /build/buildd/php5-5.2.10.dfsg.1/TSRM/tsrm_virtual_cwd.c
(gdb) thread apply all bt full

Thread 1 (process 1814):
#0  php_realpath (path=0x2a1aa00 "/usr/share/moodle/lib/adodb/adodb-time.inc.php", resolved=Cannot access memory at address 0x7fff9c472828
) at /build/buildd/php5-5.2.10.dfsg.1/TSRM/tsrm_virtual_cwd.c:278
	sb = {st_dev = 0, st_ino = 225, st_nlink = 0, st_mode = 0, st_uid = 0, st_gid = 532624, __pad0 = 0, st_rdev = 16, st_size = 0, st_blksize = 1, st_blocks = 0, st_atim = {
    tv_sec = 1, tv_nsec = 0}, st_mtim = {tv_sec = 2621929782, tv_nsec = 4284481615}, st_ctim = {tv_sec = 2621929776, tv_nsec = 400039818}, __unused = {1, 0, 5}}
	s = 0x0
	left_len = 0
	resolved_len = 2621934048
	symlinks = Cannot access memory at address 0x7fff9c47283c
(gdb) bt
#0  php_realpath (path=0x2a1aa00 "/usr/share/moodle/lib/adodb/adodb-time.inc.php", resolved=Cannot access memory at address 0x7fff9c472828
) at /build/buildd/php5-5.2.10.dfsg.1/TSRM/tsrm_virtual_cwd.c:278
#1  0x00000000006218fa in virtual_file_ex (state=0x7fff9c4789e0, path=0x2a1aa00 "/usr/share/moodle/lib/adodb/adodb-time.inc.php", verify_path=0x100000000, use_realpath=0)
    at /build/buildd/php5-5.2.10.dfsg.1/TSRM/tsrm_virtual_cwd.c:746
#2  0x0000000000629b7c in expand_filepath_ex (filepath=0x2a1aa00 "/usr/share/moodle/lib/adodb/adodb-time.inc.php", real_path=0x0, relative_to=0x7fff9c475990 "", 
    relative_to_len=44149294) at /build/buildd/php5-5.2.10.dfsg.1/main/fopen_wrappers.c:686
#3  0x000000000063e72a in _php_stream_fopen (filename=0x2a1aa00 "/usr/share/moodle/lib/adodb/adodb-time.inc.php", mode=0x6ecf5c "rb", opened_path=0x7fff9c479ce0, options=133)
    at /build/buildd/php5-5.2.10.dfsg.1/main/streams/plain_wrapper.c:893
#4  0x000000000063eaed in _php_stream_fopen_with_path (filename=0x2a1aa00 "/usr/share/moodle/lib/adodb/adodb-time.inc.php", 
    mode=0x8500000000 <Address 0x8500000000 out of bounds>, path=0x8aadf0 ".:/usr/share/php:/usr/share/pear", opened_path=0x7fff9c479ce0, options=32767)
    at /build/buildd/php5-5.2.10.dfsg.1/main/streams/plain_wrapper.c:1351
#5  0x000000000063951e in _php_stream_open_wrapper_ex (path=0x2a1aa00 "/usr/share/moodle/lib/adodb/adodb-time.inc.php", mode=0x0, options=141, opened_path=0x7fff9c479ce0, 
    context=0x0) at /build/buildd/php5-5.2.10.dfsg.1/main/streams/streams.c:1827
#6  0x00000000006242ef in php_stream_open_for_zend_ex (filename=0x2a1aa00 "/usr/share/moodle/lib/adodb/adodb-time.inc.php", handle=0x7fff9c479cd0, mode=44149294)
    at /build/buildd/php5-5.2.10.dfsg.1/main/main.c:1082
#7  0x000000000067d434 in zend_stream_fixup (file_handle=0x7fff9c479cd0) at /build/buildd/php5-5.2.10.dfsg.1/Zend/zend_stream.c:62
#8  0x000000000064a0bb in open_file_for_scanning (file_handle=<incomplete type>) at /build/buildd/php5-5.2.10.dfsg.1/Zend/zend_language_scanner.c:3322
#9  0x000000000064a90d in compile_file (file_handle=<incomplete type>, type=2) at /build/buildd/php5-5.2.10.dfsg.1/Zend/zend_language_scanner.c:3408
#10 0x000000000064a24d in compile_filename (type=2, filename=0x7fff9c47a7d0) at /build/buildd/php5-5.2.10.dfsg.1/Zend/zend_language_scanner.c:3465
#11 0x000000000069122a in ZEND_INCLUDE_OR_EVAL_SPEC_TMP_HANDLER (execute_data=0x7fff9c47aa10) at /build/buildd/php5-5.2.10.dfsg.1/Zend/zend_vm_execute.h:4643
#12 0x000000000068c024 in execute (op_array=0x29fcc20) at /build/buildd/php5-5.2.10.dfsg.1/Zend/zend_vm_execute.h:92
#13 0x000000000069107b in ZEND_INCLUDE_OR_EVAL_SPEC_TMP_HANDLER (execute_data=0x7fff9c481be0) at /build/buildd/php5-5.2.10.dfsg.1/Zend/zend_vm_execute.h:4672
#14 0x000000000068c024 in execute (op_array=0x29fc2d0) at /build/buildd/php5-5.2.10.dfsg.1/Zend/zend_vm_execute.h:92
#15 0x000000000069107b in ZEND_INCLUDE_OR_EVAL_SPEC_TMP_HANDLER (execute_data=0x7fff9c482270) at /build/buildd/php5-5.2.10.dfsg.1/Zend/zend_vm_execute.h:4672
#16 0x000000000068c024 in execute (op_array=0x29fb040) at /build/buildd/php5-5.2.10.dfsg.1/Zend/zend_vm_execute.h:92
#17 0x000000000069107b in ZEND_INCLUDE_OR_EVAL_SPEC_TMP_HANDLER (execute_data=0x7fff9c486a60) at /build/buildd/php5-5.2.10.dfsg.1/Zend/zend_vm_execute.h:4672
#18 0x000000000068c024 in execute (op_array=0x29dc598) at /build/buildd/php5-5.2.10.dfsg.1/Zend/zend_vm_execute.h:92
#19 0x0000000000668348 in zend_execute_scripts (type=32767, retval=0x0, file_count=-1672975480) at /build/buildd/php5-5.2.10.dfsg.1/Zend/zend.c:1215
#20 0x0000000000623308 in php_execute_script (primary_file=Cannot access memory at address 0x80009c485af0
) at /build/buildd/php5-5.2.10.dfsg.1/main/main.c:2046
#21 0x00000000006e6ed7 in main (argc=-1672965576, argv=0x7fff9dba7d4c) at /build/buildd/php5-5.2.10.dfsg.1/sapi/cli/php_cli.c:1168

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (700, 'testing'), (600, 'unstable'), (550, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.30-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages php5-cli depends on:
ii  libbz2-1.0             1.0.5-3           high-quality block-sorting file co
ii  libc6                  2.9-12            GNU C Library: Shared libraries
ii  libcomerr2             1.41.3-1          common error description library
ii  libdb4.7               4.7.25-7          Berkeley v4.7 Database Libraries [
ii  libgssapi-krb5-2       1.7dfsg~beta3-1   MIT Kerberos runtime libraries - k
ii  libk5crypto3           1.7dfsg~beta3-1   MIT Kerberos runtime libraries - C
ii  libkrb5-3              1.7dfsg~beta3-1   MIT Kerberos runtime libraries
ii  libmagic1              5.03-1            File type determination library us
ii  libncurses5            5.7+20090803-1    shared libraries for terminal hand
ii  libpcre3               7.8-2             Perl 5 Compatible Regular Expressi
ii  libssl0.9.8            0.9.8k-3          SSL shared libraries
ii  libxml2                2.7.3.dfsg-2.1    GNOME XML library
ii  mime-support           3.46-1            MIME files 'mime.types' & 'mailcap
ii  php5-common            5.2.10.dfsg.1-2   Common files for packages built fr
ii  tzdata                 2009k-3           time zone and daylight-saving time
ii  ucf                    3.0018            Update Configuration File: preserv
ii  zlib1g                 1:1.2.3.3.dfsg-15 compression library - runtime

Versions of packages php5-cli suggests:
pn  php-pear                      <none>     (no description available)

-- 
bye,
pabs

http://wiki.debian.org/PaulWise
[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#543177; Package php5-cli. (Fri, 18 Sep 2009 08:54:06 GMT) (full text, mbox, link).


Acknowledgement sent to "Raoul Bhatia [IPAX]" <r.bhatia@ipax.at>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Fri, 18 Sep 2009 08:54:06 GMT) (full text, mbox, link).


Message #10 received at 543177@bugs.debian.org (full text, mbox, reply):

From: "Raoul Bhatia [IPAX]" <r.bhatia@ipax.at>
To: 543177@bugs.debian.org
Subject: php5 segfault in php_realpath
Date: Fri, 18 Sep 2009 10:51:25 +0200
hi,

i can confirm this bug and too see segfaults using php5-cli:

a sample backtrace. 3 of 4 segfaults that occoured in the last 16 hours
have been within php_realpath. the remaining one was in T1_CloseLib ()
from /usr/lib/libt1.so.5 while calling the zm_shutdown_gd at
/tmp/buildd/php5-5.2.6.dfsg.1/ext/gd/gd.c:1225

(i do not know if the "gd segfault" is related, so i post this info in
here anyways).

> (gdb) thread apply all bt full
> 
> Thread 1 (process 5301):
> #0  php_realpath (path=0x7fff0777f8e0 "/data/www/k000535/web/animationsplanet.com/typo3conf", resolved=Cannot access memory at address 0x7fff07774688
> ) at /tmp/buildd/php5-5.2.6.dfsg.1/TSRM/tsrm_virtual_cwd.c:278
>         sb = {st_dev = 0, st_ino = 0, st_nlink = 0, st_mode = 0, st_uid = 0, st_gid = 0, pad0 = 0, st_rdev = 0, st_size = 0, st_blksize = 0, st_blocks = 0, st_atim = {tv_sec = 0, tv_nsec = 0}, st_mtim = {
>     tv_sec = 0, tv_nsec = 0}, st_ctim = {tv_sec = 0, tv_nsec = 0}, __unused = {0, 0, 0}}
>         s = 0x0
>         left_len = 125303008
>         resolved_len = 125282368
>         symlinks = Cannot access memory at address 0x7fff0777469c
> (gdb) bt
> #0  php_realpath (path=0x7fff0777f8e0 "/data/www/k000535/web/animationsplanet.com/typo3conf", resolved=Cannot access memory at address 0x7fff07774688
> ) at /tmp/buildd/php5-5.2.6.dfsg.1/TSRM/tsrm_virtual_cwd.c:278
> #1  0x0000000000621158 in virtual_file_ex (state=0x7fff0777a840, path=0x7fff0777f8e0 "/data/www/k000535/web/animationsplanet.com/typo3conf", verify_path=0x100000000, use_realpath=0)
>     at /tmp/buildd/php5-5.2.6.dfsg.1/TSRM/tsrm_virtual_cwd.c:732
> #2  0x00000000006293f3 in expand_filepath (filepath=0x7fff0777f8e0 "/data/www/k000535/web/animationsplanet.com/typo3conf", real_path=0x7fff0777e890 "")
>     at /tmp/buildd/php5-5.2.6.dfsg.1/main/fopen_wrappers.c:667
> #3  0x0000000000629a58 in php_check_specific_open_basedir (basedir=0x1b4ba80 "/usr/share/php/", path=0x7fff0777f8e0 "/data/www/k000535/web/animationsplanet.com/typo3conf")
>     at /tmp/buildd/php5-5.2.6.dfsg.1/main/fopen_wrappers.c:112
> #4  0x0000000000629dc9 in php_check_open_basedir_ex (path=0x7fff0777f8e0 "/data/www/k000535/web/animationsplanet.com/typo3conf", warn=32767) at /tmp/buildd/php5-5.2.6.dfsg.1/main/fopen_wrappers.c:261
> #5  0x00000000005b7b7d in php_stat (filename=0x1b4c098 "/data/www/k000535/web/animationsplanet.com/typo3conf/", filename_length=125270000, type=13, return_value=0x1b540a0)
>     at /tmp/buildd/php5-5.2.6.dfsg.1/ext/standard/filestat.c:753
> #6  0x00000000005b8884 in zif_is_dir (ht=125303008, return_value=0x1b540a0, return_value_ptr=0xfefefeff656d6e62, this_ptr=0x0, return_value_used=0)
>     at /tmp/buildd/php5-5.2.6.dfsg.1/ext/standard/filestat.c:1073
> #7  0x00000000006a0f4d in zend_do_fcall_common_helper_SPEC (execute_data=0x7fff07788f60) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:200
> #8  0x000000000068c484 in execute (op_array=0x1b4cc98) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:92
> #9  0x0000000000691a2b in ZEND_INCLUDE_OR_EVAL_SPEC_TMP_HANDLER (execute_data=0x7fff07789b40) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:4612
> #10 0x000000000068c484 in execute (op_array=0x1b4bb90) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:92
> #11 0x00000000006682c8 in zend_execute_scripts (type=32767, retval=0x0, file_count=125344872) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend.c:1215
> #12 0x0000000000622b88 in php_execute_script (primary_file=Cannot access memory at address 0x800007788bd0
> ) at /tmp/buildd/php5-5.2.6.dfsg.1/main/main.c:2028
> #13 0x00000000006e04bd in main (argc=125363208, argv=0x7fff0778c000) at /tmp/buildd/php5-5.2.6.dfsg.1/sapi/cgi/cgi_main.c:1954
> (gdb) quit

i run apache2 + suphp + safemode off:
> ii  apache2                    2.2.9-10+lenny4        Apache HTTP Server metapackage
> ii  apache2-mpm-worker         2.2.9-10+lenny4        Apache HTTP Server - high speed threaded mod
> ii  apache2-utils              2.2.9-10+lenny4        utility programs for webservers
> ii  apache2.2-common           2.2.9-10+lenny4        Apache HTTP Server common files
> ii  libapache2-mod-auth-mysql  4.3.9-11               Apache 2 module for MySQL authentication
> ii  libapache2-mod-rpaf        0.5-3                  module for Apache2 which takes the last IP f
> ii  libapache2-mod-suphp       0.6.2-3                Apache2 module to run php scripts with the o
> ii  php-pear                   5.2.6.dfsg.1-1+lenny3  PEAR - PHP Extension and Application Reposit
> ii  php5-adodb                 5.04-3                        Extension optimising ADOdb database abstract
> ii  php5-cgi                   5.2.6.dfsg.1-1+lenny3  server-side, HTML-embedded scripting languag
> ii  php5-cli                   5.2.6.dfsg.1-1+lenny3  command-line interpreter for the php5 script
> ii  php5-common                5.2.6.dfsg.1-1+lenny3  Common files for packages built from the php
> ii  php5-curl                  5.2.6.dfsg.1-1+lenny3  CURL module for php5
> ii  php5-dbg                   5.2.6.dfsg.1-1+lenny3  Debug symbols for PHP5
> ii  php5-gd                    5.2.6.dfsg.1-1+lenny3  GD module for php5
> ii  php5-imagick               2.1.1RC1-1                    ImageMagick module for php5
> ii  php5-imap                  5.2.6.dfsg.1-1+lenny3  IMAP module for php5
> ii  php5-mcrypt                5.2.6.dfsg.1-1+lenny3  MCrypt module for php5
> ii  php5-mysql                 5.2.6.dfsg.1-1+lenny3  MySQL module for php5
> ii  php5-sqlite                5.2.6.dfsg.1-1+lenny3  SQLite module for php5
> ii  suphp-common               0.6.2-3                Common files for mod suphp

php.ini changes i made:
> --- php.ini.old     2009-03-05 15:47:06.000000000 +0100
> +++ php.ini 2009-08-18 16:38:04.000000000 +0200
> @@ -1,4 +1,5 @@
>  [PHP]
> +; IPAX
>  
>  ;;;;;;;;;;;
>  ; WARNING ;
> @@ -215,7 +216,7 @@
>  ;
>  
>  ;open_basedir =
> -open_basedir = 
> +open_basedir = /usr/share/php/:/data/www/k000535/tmp/:/data/www/k000535/:/usr/bin/:/bin:/usr/local/bin:/usr/share/fonts/truetype/
>  
>  ; This directive allows you to disable certain functions for security reasons.
>  ; It receives a comma-delimited list of function names. This directive is
> @@ -268,7 +269,7 @@
>  max_execution_time = 30     ; Maximum execution time of each script, in seconds
>  max_input_time = 60 ; Maximum amount of time each script may spend parsing request data
>  ;max_input_nesting_level = 64 ; Maximum input variable nesting level
> -memory_limit = 32M      ; Maximum amount of memory a script may consume (32MB)
> +memory_limit = 48M      ; Maximum amount of memory a script may consume (48MB)
>  
>  
>  ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
> @@ -561,6 +562,7 @@
>  ; Temporary directory for HTTP uploaded files (will use system default if not
>  ; specified).
>  ;upload_tmp_dir =
> +upload_tmp_dir = /data/www/k000535/tmp/
>  
>  ; Maximum allowed size for uploaded files.
>  upload_max_filesize = 64M
> @@ -956,6 +958,7 @@
>  ; where MODE is the octal representation of the mode. Note that this
>  ; does not overwrite the process's umask.
>  ;session.save_path = /var/lib/php5
> +session.save_path = /data/www/k000535/tmp/
>  
>  ; Whether to use cookies.
>  session.use_cookies = 1
> @@ -1244,7 +1247,7 @@
>  ; Enables or disables WSDL caching feature.
>  soap.wsdl_cache_enabled=1
>  ; Sets the directory name where SOAP extension will put cache files.
> -soap.wsdl_cache_dir="/tmp"
> +soap.wsdl_cache_dir="/data/www/k000535/tmp/"
>  ; (time to live) Sets the number of second while cached file will be used 
>  ; instead of original one.
>  soap.wsdl_cache_ttl=86400

cheers,
raoul
-- 
____________________________________________________________________
DI (FH) Raoul Bhatia M.Sc.          email.          r.bhatia@ipax.at
Technischer Leiter

IPAX - Aloy Bhatia Hava OEG         web.          http://www.ipax.at
Barawitzkagasse 10/2/2/11           email.            office@ipax.at
1190 Wien                           tel.               +43 1 3670030
FN 277995t HG Wien                  fax.            +43 1 3670030 15
____________________________________________________________________




Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#543177; Package php5-cli. (Tue, 22 Dec 2009 09:39:03 GMT) (full text, mbox, link).


Acknowledgement sent to "Raoul Bhatia [IPAX]" <r.bhatia@ipax.at>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Tue, 22 Dec 2009 09:39:03 GMT) (full text, mbox, link).


Message #15 received at 543177@bugs.debian.org (full text, mbox, reply):

From: "Raoul Bhatia [IPAX]" <r.bhatia@ipax.at>
To: 543177@bugs.debian.org
Subject: Re: php5 segfault in php_realpath
Date: Tue, 22 Dec 2009 10:12:41 +0100
also, digging through the php5 changelogs [1] shows some bugfixes in
the area of the last few calls of the backtrace (e.g. [2]).

any news on this issue as well as hints on how to extract more
information from the core files would be appreciated, as i am no expert
in debugging c programs or php.

cheers,
raoul
[1]
http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/TSRM/tsrm_virtual_cwd.c?view=log
[2]
http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/TSRM/tsrm_virtual_cwd.c?r1=244675&r2=246092




Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#543177; Package php5-cli. (Tue, 22 Dec 2009 09:39:04 GMT) (full text, mbox, link).


Acknowledgement sent to "Raoul Bhatia [IPAX]" <r.bhatia@ipax.at>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Tue, 22 Dec 2009 09:39:04 GMT) (full text, mbox, link).


Message #20 received at 543177@bugs.debian.org (full text, mbox, reply):

From: "Raoul Bhatia [IPAX]" <r.bhatia@ipax.at>
To: 543177@bugs.debian.org
Subject: php5 segfault in php_realpath
Date: Tue, 22 Dec 2009 10:09:30 +0100
are there any news on this issue available?

i have applied the mysql updates 5.0.51a-24+lenny2+spu1.
the scripts that where mentioned there are running without any issue,
so i can confirm that these mysql updates solve bug 513204.

the php_realpath segfault still occurs.

a recent backtrace:
> Program terminated with signal 11, Segmentation fault.
> [New process 22366]
> #0  php_realpath (path=0x2a8b268 "/data/www/k000354/web/embcv.at/libraries/joomla/registry/format.php", resolved=Cannot access memory at address 0x7fff2e01afd8
> ) at /tmp/buildd/php5-5.2.6.dfsg.1/TSRM/tsrm_virtual_cwd.c:278
> 278             char cwd[MAXPATHLEN];
> (gdb) bt
> #0  php_realpath (path=0x2a8b268 "/data/www/k000354/web/embcv.at/libraries/joomla/registry/format.php", resolved=Cannot access memory at address 0x7fff2e01afd8
> ) at /tmp/buildd/php5-5.2.6.dfsg.1/TSRM/tsrm_virtual_cwd.c:278
> #1  0x0000000000621258 in virtual_file_ex (state=0x7fff2e021190, path=0x2a8b268 "/data/www/k000354/web/embcv.at/libraries/joomla/registry/format.php", verify_path=0x100007068, use_realpath=1879060080)
>     at /tmp/buildd/php5-5.2.6.dfsg.1/TSRM/tsrm_virtual_cwd.c:732
> #2  0x0000000000629503 in expand_filepath (filepath=0x2a8b268 "/data/www/k000354/web/embcv.at/libraries/joomla/registry/format.php", real_path=0x7fff2e0251e0 "")
>     at /tmp/buildd/php5-5.2.6.dfsg.1/main/fopen_wrappers.c:667
> #3  0x0000000000629b68 in php_check_specific_open_basedir (basedir=0x2a96338 "/usr/share/php/", path=0x2a8b268 "/data/www/k000354/web/embcv.at/libraries/joomla/registry/format.php")
>     at /tmp/buildd/php5-5.2.6.dfsg.1/main/fopen_wrappers.c:112
> #4  0x0000000000629ed9 in php_check_open_basedir_ex (path=0x2a8b268 "/data/www/k000354/web/embcv.at/libraries/joomla/registry/format.php", warn=1936025970)
>     at /tmp/buildd/php5-5.2.6.dfsg.1/main/fopen_wrappers.c:261
> #5  0x00000000005b7c7d in php_stat (filename=0x2a8b268 "/data/www/k000354/web/embcv.at/libraries/joomla/registry/format.php", filename_length=771875136, type=12, return_value=0x2a8ccc0)
>     at /tmp/buildd/php5-5.2.6.dfsg.1/ext/standard/filestat.c:753
> #6  0x00000000005b8aa4 in zif_is_file (ht=44610152, return_value=0x2a8ccc0, return_value_ptr=0xffffffff00000000, this_ptr=0x30102fe300706870, return_value_used=0)
>     at /tmp/buildd/php5-5.2.6.dfsg.1/ext/standard/filestat.c:1068
> #7  0x00000000006a10ed in zend_do_fcall_common_helper_SPEC (execute_data=0x7fff2e0287d0) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:200
> #8  0x000000000068c624 in execute (op_array=0x2990460) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:92
> #9  0x00000000006a09fe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fff2e028b00) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:234
> #10 0x000000000068c624 in execute (op_array=0x2987298) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:92
> #11 0x0000000000696a32 in ZEND_INCLUDE_OR_EVAL_SPEC_VAR_HANDLER (execute_data=0x7fff2e028e80) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:7759
> #12 0x000000000068c624 in execute (op_array=0x29a0c20) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:92
> #13 0x00000000006a09fe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fff2e029080) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:234
> #14 0x000000000068c624 in execute (op_array=0x29b4610) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:92
> #15 0x000000000065bf15 in zend_call_function (fci=0x7fff2e0292b0, fci_cache=0x29f05c0) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_execute_API.c:1013
> #16 0x000000000065cc6c in zend_lookup_class_ex (name=Cannot access memory at address 0x80002e029298
> ) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_execute_API.c:1120
> #17 0x000000000065ce53 in zend_fetch_class (class_name=0x29f0a10 "JRegistry", class_name_len=9, fetch_type=1) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_execute_API.c:1528
> #18 0x000000000068966f in ZEND_FETCH_CLASS_SPEC_CONST_HANDLER (execute_data=0x7fff2e029630) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:650
> #19 0x000000000068c624 in execute (op_array=0x29f05c0) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:92
> #20 0x00000000006a09fe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fff2e0299d0) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:234
> #21 0x000000000068c624 in execute (op_array=0x298ea08) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:92
> #22 0x00000000006a09fe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fff2e029d50) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:234
> #23 0x000000000068c624 in execute (op_array=0x2a87038) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:92
> #24 0x00000000006a09fe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fff2e02a4a0) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:234
> #25 0x000000000068c624 in execute (op_array=0x2a07830) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:92
> #26 0x00000000006a09fe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fff2e02a6f0) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:234
> #27 0x000000000068c624 in execute (op_array=0x2a783a0) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:92
> #28 0x00000000006a09fe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fff2e02ae30) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:234
> #29 0x000000000068c624 in execute (op_array=0x2a0a038) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:92
> #30 0x00000000006a09fe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fff2e02b180) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:234
> #31 0x000000000068c624 in execute (op_array=0x298e6a0) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:92
> #32 0x00000000006a09fe in zend_do_fcall_common_helper_SPEC (execute_data=0x7fff2e02bed0) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:234
> #33 0x000000000068c624 in execute (op_array=0x2986318) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend_vm_execute.h:92
> #34 0x0000000000668418 in zend_execute_scripts (type=32767, retval=0x0, file_count=771932152) at /tmp/buildd/php5-5.2.6.dfsg.1/Zend/zend.c:1215
> #35 0x0000000000622c88 in php_execute_script (primary_file=Cannot access memory at address 0x80002e02af60
> ) at /tmp/buildd/php5-5.2.6.dfsg.1/main/main.c:2028
> #36 0x00000000006e065d in main (argc=771950488, argv=0x7fff2e02e390) at /tmp/buildd/php5-5.2.6.dfsg.1/sapi/cgi/cgi_main.c:1954

cheers,
raoul




Reply sent to Ondřej Surý <ondrej@sury.org>:
You have taken responsibility. (Wed, 27 Apr 2011 08:33:52 GMT) (full text, mbox, link).


Notification sent to Paul Wise <pabs@debian.org>:
Bug acknowledged by developer. (Wed, 27 Apr 2011 08:33:53 GMT) (full text, mbox, link).


Message #25 received at 543177-done@bugs.debian.org (full text, mbox, reply):

From: Ondřej Surý <ondrej@sury.org>
To: 465081-done@bugs.debian.org, 537794-done@bugs.debian.org, 553048-done@bugs.debian.org, 574610-done@bugs.debian.org, 584885-done@bugs.debian.org, 584957-done@bugs.debian.org, 594613-done@bugs.debian.org, 493045-done@bugs.debian.org, 549492-done@bugs.debian.org, 450581-done@bugs.debian.org, 502174-done@bugs.debian.org, 543177-done@bugs.debian.org, 547134-done@bugs.debian.org, 552089-done@bugs.debian.org, 556523-done@bugs.debian.org, 559273-done@bugs.debian.org, 576147-done@bugs.debian.org, 578754-done@bugs.debian.org, 601602-done@bugs.debian.org, 609355-done@bugs.debian.org, 419649-done@bugs.debian.org, 442063-done@bugs.debian.org, 500567-done@bugs.debian.org, 513429-done@bugs.debian.org, 528600-done@bugs.debian.org, 597650-done@bugs.debian.org, 603641-done@bugs.debian.org, 405067-done@bugs.debian.org, 430397-done@bugs.debian.org, 440775-done@bugs.debian.org, 591759-done@bugs.debian.org, 565387-done@bugs.debian.org, 507762-done@bugs.debian.org, 529278-done@bugs.debian.org, 556459-done@bugs.debian.org
Subject: Closing segfaults (and some other minor bugs) for version older than squeeze (5.3.3)
Date: Wed, 27 Apr 2011 10:28:24 +0200
Version: 5.3.3-7

Hi,

since lenny is oldstable it will not get any updates now (except
security)[1], I am closing all segfault bugs filled against php5 in
lenny. (This is kind of saying that we don't care much about php5 in
lenny anymore).

If you believe the bug is still there, please provide evidence[2] and
a (preferably complete) test case with up-to-date squeeze (and/or
testing or unstable) version of php5 and reopen the bug.

O.
1. http://wiki.debian.org/PHP#Notes_on_PHP_and_security
2. Install php5-dbg and provide backtrace:
http://bugs.php.net/bugs-generating-backtrace.php
-- 
Ondřej Surý <ondrej@sury.org>




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Thu, 26 May 2011 07:40:07 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sun Jul 2 01:14:53 2023; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.